# create_customer

Create a new customer record

Agent View of the PolicyLayer registry record for `create_customer`. HTML page: https://policylayer.com/tools/stripe/create-customer

## Facts

- Tool: `create_customer`
- Server: Stripe (`@modelcontextprotocol/server-stripe`) — https://policylayer.com/tools/stripe.md
- Install: `npx -y @modelcontextprotocol/server-stripe`
- Homepage: https://github.com/stripe/agent-toolkit
- Risk category: Write (Medium risk)
- Registry record: grade D, identity verified
- Server auth posture: gated
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "create_customer",
    "arguments": {}
  }
}
```

## Why create_customer is rated Medium

This tool creates a new customer record, which is a reversible write operation. While it does not directly move money or delete data, creating customer records in a payment processor can enable downstream financial transactions. The medium severity reflects that misuse could facilitate fraudulent accounts or spam, but the operation itself is not irreversible and does not immediately commit financial obligations.

From the tool's own definition: "Tool name 'create_customer' and description 'Create a new customer record' — creates new data in Stripe's system."

Risk signals: Creates customer records in Stripe

## Use case

AI agents use create_customer to create or update resources in Stripe, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your Stripe environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches Stripe:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "create_customer": {
      "limits": [
        {
          "counter": "create_customer_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on Stripe (26)

- `cancel_subscription` — Destructive — https://policylayer.com/tools/stripe/cancel-subscription.md
- `create_coupon` — Financial — https://policylayer.com/tools/stripe/create-coupon.md
- `create_invoice` — Financial — https://policylayer.com/tools/stripe/create-invoice.md
- `create_invoice_item` — Financial — https://policylayer.com/tools/stripe/create-invoice-item.md
- `create_payment_link` — Financial — https://policylayer.com/tools/stripe/create-payment-link.md
- `create_refund` — Financial — https://policylayer.com/tools/stripe/create-refund.md
- `finalize_invoice` — Financial — https://policylayer.com/tools/stripe/finalize-invoice.md
- `update_subscription` — Financial — https://policylayer.com/tools/stripe/update-subscription.md
- `fetch_stripe_resources` — Read — https://policylayer.com/tools/stripe/fetch-stripe-resources.md
- `get_stripe_account_info` — Read — https://policylayer.com/tools/stripe/get-stripe-account-info.md
- `list_charges` — Read — https://policylayer.com/tools/stripe/list-charges.md
- `list_coupons` — Read — https://policylayer.com/tools/stripe/list-coupons.md
- `list_customers` — Read — https://policylayer.com/tools/stripe/list-customers.md
- `list_disputes` — Read — https://policylayer.com/tools/stripe/list-disputes.md
- `list_invoices` — Read — https://policylayer.com/tools/stripe/list-invoices.md
- `list_payment_intents` — Read — https://policylayer.com/tools/stripe/list-payment-intents.md
- `list_prices` — Read — https://policylayer.com/tools/stripe/list-prices.md
- `list_products` — Read — https://policylayer.com/tools/stripe/list-products.md
- `list_setup_intents` — Read — https://policylayer.com/tools/stripe/list-setup-intents.md
- `list_subscriptions` — Read — https://policylayer.com/tools/stripe/list-subscriptions.md
- `retrieve_balance` — Read — https://policylayer.com/tools/stripe/retrieve-balance.md
- `search_stripe_documentation` — Read — https://policylayer.com/tools/stripe/search-stripe-documentation.md
- `search_stripe_resources` — Read — https://policylayer.com/tools/stripe/search-stripe-resources.md
- `create_price` — Write — https://policylayer.com/tools/stripe/create-price.md
- `create_product` — Write — https://policylayer.com/tools/stripe/create-product.md
- `update_dispute` — Write — https://policylayer.com/tools/stripe/update-dispute.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=stripe · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/stripe